A detection generates thousands of false positives and overwhelms analysts. What should the manager prioritize?

1. Add all alerts to the board's agenda unchanged
2. Automatically label every alert a confirmed breach
3. Validate the rule and tune it against representative malicious and benign cases
4. Disable every detection rule